Notes

Google의 보안 엔지니어링: 제 면접 학습 노트 작성자: nolang 저는 Google의 보안 엔지니어이며, 이는 제가 면접을 준비할 때 작성했던 노트입니다. 이 분야에서의 첫 직장이며, 많은 분들이 어떻게 공부했는지 물어보셨습니다. 제 노트는 주로 배워야 할 용어와 기술 목록과, 특정 세부 사항을 기억하는 데 도움이 된 작은 정보들로 구성되어 있습니다. 또한 공부할 주제를 아는 것만큼 중요한 면접 팁과 학습 전략도 포함시켰습니다. 때때로 더 많은 주제를 포함하도록 노트를 업데이트합니다. 목록에는 매우 많은 주제와 용어가...

CVE-2026-41940

CVE-2026-41940 ✅ スクリプト分析（スキャナーの動作と仕組み） ✅ 根本原因の技術的説明（CRLF/Session.pm の差分） ✅ 予防 — パッチコマンド、セキュアコーディングの教訓 ✅ 緩和策 — ファイアウォールルール、WAF設定、堅牢化 ✅ IOCハンティング — 既に攻撃を受けたかどうかの検出 ✅ VaPT手法 — スコープ設定、偵察、報告フレームワーク、MITREマッピング ✅ リスクスコアリング、モバイルナビゲーション、コピーボタン、折りたたみセクション...

CVE-2021-44228---Log4Shell-Analysis

🔥 Log4Shell CVE-2021-44228 分析 これは、現代ソフトウェア史上最も深刻な脆弱性の一つである Log4Shell 脆弱性 CVE-2021-44228 に関する包括的な技術分析です。 📖 概要 このリポジトリには、Apache Log4j2 における Log4Shell 脆弱性の詳細な分析が含まれています： 脆弱性メカニズムの技術的な詳細解説 コード分析とパッチレビュー 攻撃フローの解説 緩和戦略 ラボ環境構築ガイド 🎯 クイックサマリー...

CVE-2026-77425

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order passes attacker-controlled strategy IDs to unprotectedUpdateStrategiesSortOrder and updateSortOrder without verifyin...

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis Follina（CVE-2022-30190）として知られる Microsoft Office の脆弱性に関する調査。詳細な分析、管理されたラボ環境での概念実証（PoC）エクスプロイト、および緩和策を含みます。教育および研究目的のみで使用してください。...

CVE-2026-92087: Improper Authorization

@fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are composed with the relation "or" option together with the run "all" option and one entry is a nested array acting as ...

Exploit for Observable Discrepancy in Intel Atom_C

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability...

Catan and Mouse

Welcome to this week's edition of the Threat Source newsletter. " I do not know everything; still many things I understand." ― Madeleine L'Engle, A Wrinkle in Time " Don't try to comprehend with your mind. Your minds are very limited. Use your intuition." ― Madeleine L'Engle, A Wind in the Door T...

MAL-2026-5783 Malicious code in vault-strategies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7037d9efc65a0885cc000a92c46ea9bed2097d02c8fb2883ceaa3eb2fd5eeb On npm install, the package's preinstall hook preinstall: node postinstall.js || true executes postinstall.js, which enumerates process.env and filte...

Malicious code in vault-strategies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7037d9efc65a0885cc000a92c46ea9bed2097d02c8fb2883ceaa3eb2fd5eeb On npm install, the package's preinstall hook preinstall: node postinstall.js || true executes postinstall.js, which enumerates process.env and filte...

wannacry-soc-lab

WannaCry SOC Investigation Lab Overview This project simu...

When Discovery Outpaces Remediation: Modeling AI-Accelerated Vulnerability Discovery in Interconnected Systems

Advanced AI systems for code analysis, binary analysis, fuzzing orchestration, and penetration-test planningmay significantly increase the rate at which latent vulnerabilities are discovered. While improved discovery can benefit defenders, it can also overload remediation pipelines and accelerate...

Evaluating and Combating the Impact of Concept Drift on the Performance of Machine Learning-Based Phishing Detection Systems

The expansion of the digital domain has resulted in a substantial increase in digital communication, with email emerging as one of the most prominent channels. The proliferation of email communication is apparent in both professional and personal contexts, thereby creating numerous vulnerabilitie...

Unveiling Privacy Risks in Multi-Modal Large Language Models: Task-Specific Vulnerabilities and Mitigation Challenges

Privacy risks in text-only Large Language Models LLMs are well studied, particularly their tendency to memorize and leak sensitive information. However, Multi-modal Large Language Models MLLMs, which process both text and images, introduce unique privacy challenges that remain underexplored...

Steganography without Modification: Hidden Communication Via LLM Seeds

We demonstrate that widely deployed Large Language Model LLM inference stacks harbor a steganographic channel that requires no modification to model weights, sampling code, or output distributions. The channel exploits a structural property of deterministic decoding: pseudo-random number generato...

CVE-2025-40904

A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remo...

Beyond Pass/Fail: Using Process Mining to Understand How LLMs Resist (And Fail) Red Team Attacks

Standard AI red teaming evaluations reduce adversarial campaigns to a single binary outcome, attack success rate ASR, not taking into account the sequential structure of how models resist or yield to attacks. We propose applying process mining, a discipline for discovering and analyzing process...

Steering LLM Viewpoints through Fabricated Evidence Injection

As chatbots increasingly influence daily decision-making, their potential to produce misleading responses poses substantial risks to users. This paper investigates a critical cognitive vulnerability in LLMs: their tendency to uncritically trust external context when presented with fabricated...

Credential Disclosure in (EU) Digital Identity Wallets: Privacy Risks and Practical Mitigations

The European Union will introduce the EUDI Wallet by late 2026, which allows users to hold digital credentials i.e., representations of physical official identity documents on their devices. This will allow users to securely and privately disclose identity attributes to websites. Although such a...

TeleHunt: A Framework and Tool for Efficient Cybercriminal Community Discovery on Telegram

This paper presents TeleHunt, a framework and tool for evaluating the effectiveness of different strategies to discover cybercriminal communities on Telegram. TeleHunt employs a set of reference-driven snowballing strategies, integrating message-level classification, contextual filtering, and...